Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
File: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft (raw, json)
Hash identifier: sxP7tkYF6+ihmpPbLIMn1o+nw9NyLX2bc2HsPTNqHj0=
Subject key identifier: 86:91:6E:2A:F8:F8:A2:C8:F0:BD:16:4F:C4:28:CE:C3:41:3A:7C:E3
Authority key identifier: 72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
Certificate issuer: /CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Certificate serial: 0194BCE0600D2CD56BABB0081CDF2025CCB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
Manifest number: 136E
Signing time: Fri 31 Jan 2025 15:00:08 +0000
Manifest this update: Fri 31 Jan 2025 15:00:08 +0000
Manifest next update: Sat 01 Feb 2025 15:00:08 +0000
Files and hashes: 1: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl (hash: r34Ppd62uLHr+XnPWgSBUt5VBoIGV8dYiuoJ6nfUJg8=)
2: hML-Tag6b9qlpG18VlhLUkClkKg.roa (hash: LEX7BjdOFqa/vQo+qGyu7UsdS3xFcEis6fY7DeQDRek=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:60:0d:2c:d5:6b:ab:b0:08:1c:df:20:25:cc:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Validity
Not Before: Jan 31 15:00:08 2025 GMT
Not After : Feb 1 15:00:08 2025 GMT
Subject: CN=86916e2af8f8a2c8f0bd164fc428cec3413a7ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fa:30:28:75:da:bf:ac:dc:8f:f7:3c:86:b9:
2f:6f:91:3b:c3:0f:29:60:f0:13:cd:9f:e8:3b:87:
33:87:de:42:41:cc:bb:e7:76:b8:9e:45:75:53:5a:
c7:17:48:79:ce:00:22:b3:49:07:48:86:ab:ba:06:
7e:bf:b4:98:18:6c:f5:c9:2c:0a:57:d1:29:a9:22:
71:d2:c1:ed:be:6d:60:c5:c3:36:0b:4f:5d:09:45:
cf:df:0f:75:51:93:74:71:59:dc:5e:40:88:76:ec:
29:fc:24:26:78:f0:a6:dd:9b:e4:b7:65:4b:f2:49:
c1:62:f8:c2:e4:7e:21:74:1f:ad:f8:f5:c1:8d:24:
9d:1b:7c:11:04:82:1c:e4:45:69:39:85:d5:25:d8:
a8:27:87:be:1f:53:68:30:ce:93:15:a6:59:10:3a:
2d:5a:60:b1:ac:be:1b:63:01:06:64:bb:c9:98:f1:
a1:44:63:67:fd:61:c2:47:66:25:9d:21:40:ea:9d:
4a:21:25:e5:7f:b4:c1:4a:53:2f:92:ac:23:1b:9f:
14:4e:97:27:26:cd:8d:65:49:97:d2:47:d2:6c:26:
b0:c2:d9:8e:ca:dc:2f:fd:7b:42:16:f4:50:84:ec:
e3:26:d8:bb:26:5f:7a:1e:88:7f:a2:95:7f:60:c9:
33:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:91:6E:2A:F8:F8:A2:C8:F0:BD:16:4F:C4:28:CE:C3:41:3A:7C:E3
X509v3 Authority Key Identifier:
keyid:72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ee:db:f6:df:4d:86:16:ca:98:9b:e4:1d:52:cb:a5:1d:e4:
0d:4a:a0:6b:f1:4e:22:d7:8a:e2:86:e9:75:f4:d1:ee:6e:e5:
ef:7c:a0:52:4e:cd:2f:10:3d:ac:98:e5:89:11:53:d8:d3:4a:
f3:89:7c:35:14:11:ef:85:fb:30:5c:9e:d7:b4:0f:d0:74:59:
c9:2e:ef:3f:23:8d:88:0e:a7:b5:7c:da:75:e6:91:b6:82:63:
2e:8a:fc:3f:c0:7c:18:77:e6:9c:28:c5:10:de:7d:dd:a7:b7:
c6:0a:58:56:0d:9f:85:92:ac:e3:0d:b8:90:f0:63:74:de:82:
5d:50:55:a2:e3:4a:94:89:9e:ea:3f:f9:62:5b:8f:4e:4b:19:
da:72:e2:d5:05:34:3c:8c:1f:6a:1b:78:e9:fc:19:38:31:92:
8c:2a:39:32:d8:0a:d6:00:d0:45:45:c7:55:6c:fb:ba:37:49:
51:ee:d0:1a:07:11:9c:66:be:65:6c:58:59:d8:4c:ba:d9:48:
c8:80:d5:56:ec:7e:6c:b2:47:36:f9:6d:43:bc:45:8f:bf:39:
64:bc:31:05:57:5e:c0:87:93:c4:c3:2e:87:94:c3:7b:1b:ec:
35:41:0e:57:ed:f4:ce:8f:24:51:86:c6:2c:b0:fe:ee:4c:17:
31:1d:56:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84GANLNVrq7AIHN8gJcy1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNDgxZGQ5MGQxMDBiZDViYzIzYzA0YjEwYzBhODQzMWNj
OWE1YjUwHhcNMjUwMTMxMTUwMDA4WhcNMjUwMjAxMTUwMDA4WjAzMTEwLwYDVQQD
Eyg4NjkxNmUyYWY4ZjhhMmM4ZjBiZDE2NGZjNDI4Y2VjMzQxM2E3Y2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPowKHXav6zcj/c8hrkvb5E7ww8p
YPATzZ/oO4czh95CQcy753a4nkV1U1rHF0h5zgAis0kHSIarugZ+v7SYGGz1ySwK
V9EpqSJx0sHtvm1gxcM2C09dCUXP3w91UZN0cVncXkCIduwp/CQmePCm3Zvkt2VL
8knBYvjC5H4hdB+t+PXBjSSdG3wRBIIc5EVpOYXVJdioJ4e+H1NoMM6TFaZZEDot
WmCxrL4bYwEGZLvJmPGhRGNn/WHCR2YlnSFA6p1KISXlf7TBSlMvkqwjG58UTpcn
Js2NZUmX0kfSbCawwtmOytwv/XtCFvRQhOzjJti7Jl96Hoh/opV/YMkzVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIaRbir4+KLI8L0WT8QozsNBOnzjMB8GA1UdIwQY
MBaAFHJIHdkNEAvVvCPASxDAqEMcyaW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2tnZDJRMFFDOVc4SThCTEVNQ29ReHpKcGJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84MzAwZjgtOWVjZS00N2NkLTgzN2Qt
ZjE5OTBiMGM3MDVhLzEvY2tnZDJRMFFDOVc4SThCTEVNQ29ReHpKcGJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84MzAwZjgtOWVjZS00N2NkLTgzN2QtZjE5OTBiMGM3MDVh
LzEvY2tnZDJRMFFDOVc4SThCTEVNQ29ReHpKcGJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYO7b9t9N
hhbKmJvkHVLLpR3kDUqga/FOIteK4obpdfTR7m7l73ygUk7NLxA9rJjliRFT2NNK
84l8NRQR74X7MFye17QP0HRZyS7vPyONiA6ntXzadeaRtoJjLor8P8B8GHfmnCjF
EN593ae3xgpYVg2fhZKs4w24kPBjdN6CXVBVouNKlIme6j/5YluPTksZ2nLi1QU0
PIwfaht46fwZODGSjCo5MtgK1gDQRUXHVWz7ujdJUe7QGgcRnGa+ZWxYWdhMutlI
yIDVVux+bLJHNvltQ7xFj785ZLwxBVdewIeTxMMuh5TDexvsNUEOV+30zo8kUYbG
LLD+7kwXMR1WyA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:17 2025 by rpki-client